Le novità del kernel di Windows Server 2008 relative alla sicurezza e alla protezione dei sistemi

Come annunciato da Raffaella, tra le altre sessioni su IT'Showtime trovate anche quella dedicata alle novità del Kernel di Windows Server 2008 relative alla sicurezza e alla protezione dei sistemi, di cui potete vedere un breve estratto:

La registrazione della sessione è disponibile a questo indirizzo, e qui è disponibile la presentazione.

Per preparare la sessione ho studiato alcuni documenti, che voglio condividere con voi e che spero vi siano utili per eventuali approfondimenti:

• Security Development Lifecycle
  • http://msdn2.microsoft.com/en-us/library/ms995349.aspx
• Le “varianti” del Kernel
  • http://www.microsoft.com/whdc/system/platform/64bit/default.mspx
• Service SID
  • http://msdn2.microsoft.com/en-us/library/ms681988.aspx
• Session 0 Isolation
  • http://download.microsoft.com/download/9/c/5/9c5b2167-8017-4bae-9fde-d599bac8184a/Session0_Vista.doc
• Address Space Layout Randomization
  • http://blogs.msdn.com/michael_howard/archive/2006/06/12/628207.aspx
  • http://blogs.msdn.com/michael_howard/archive/2006/05/26/608315.aspx
• Data Execution Prevention
  • http://blogs.technet.com/security/archive/2006/08/03/444666.aspx
  • http://en.wikipedia.org/wiki/Data_Execution_Prevention
  • http://msdn2.microsoft.com/en-us/library/aa906326.aspx
  • http://en.wikipedia.org/wiki/Buffer_overflow
• Kernel Patch Protection
  • http://www.microsoft.com/whdc/driver/kernel/64bitpatching.mspx
  • http://blogs.technet.com/security/archive/2006/08/12/446104.aspx
  • http://blogs.msdn.com/windowsvistasecurity/archive/2006/08/11/695993.aspx
• Windows Resource Protection
  • http://msdn2.microsoft.com/en-us/library/aa382503.aspx
  • http://msdn2.microsoft.com/en-us/library/aa382530.aspx
• Integrity Levels
  • http://blogs.technet.com/steriley/archive/2006/07/21/442870.aspx
  • http://en.wikipedia.org/wiki/Biba_Integrity_Model  
• User Interface Privilege Isolation
  • http://blogs.msdn.com/vishalsi/archive/2006/11/30/what-is-user-interface-privilege-isolation-uipi-on-vista.aspx
  • http://en.wikipedia.org/wiki/Shatter_attack
  • http://web.archive.org/web/20060131111536/security.tombom.co.uk/shatter.html
  • http://web.archive.org/web/20060201003045/security.tombom.co.uk/moreshatter.html
• Cryptography Next Generation
  • http://technet2.microsoft.com/windowsserver2008/en/library/532ac164-da33-4369-bef0-8f019d5a18b81033.mspx?mfr=true
  • http://msdn2.microsoft.com/en-us/library/bb204775.aspx

Potete trovare altri approfondimenti relativi alla sicurezza e a Windows Server 2008 nel blog di Feliciano Intini.

 Renato